Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
File: P1amMzFVLvkdigAFozjsmC3zfIs.mft (raw, json)
Hash identifier: txwDrasIe9lV8N260uHIzicxEI9ZQxIcWOQPwsBkv1E=
Subject key identifier: 31:16:CF:42:A9:DE:31:50:FF:44:AE:AE:0E:AF:31:C5:39:3F:0F:30
Authority key identifier: 3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B
Certificate issuer: /CN=3f56a63331552ef91d8a0005a338ec982df37c8b
Certificate serial: 0194BD4E5D1E22716CAB02C22CEE4C54D159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
Manifest number: 0E35
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: P1amMzFVLvkdigAFozjsmC3zfIs.crl (hash: vjP24WiBO5Hjp8DbspXxbJapqpD8LsII1XequzBw09E=)
2: i_E14tU_jnnkTSG9INpa9JShg9E.roa (hash: ZqQOvQcYLRY+mr+wSPe0ltP607X6tGik7hBPTVxfXqk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5d:1e:22:71:6c:ab:02:c2:2c:ee:4c:54:d1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f56a63331552ef91d8a0005a338ec982df37c8b
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=3116cf42a9de3150ff44aeae0eaf31c5393f0f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:34:06:1f:bc:41:31:67:5f:4a:7a:1e:bd:7d:
96:01:fa:35:88:eb:23:19:48:6a:e3:96:95:48:f3:
e8:f5:c6:1a:cf:7d:50:bf:2c:80:f3:20:44:bf:2a:
af:10:57:8a:1c:70:0a:08:24:72:78:ce:02:59:2c:
0c:3c:06:71:63:00:c7:7b:be:4b:90:5e:bd:27:a4:
1b:ce:b4:7b:ea:47:8b:87:a8:60:1f:88:d0:33:9d:
04:14:e9:84:2a:10:90:9a:d6:19:53:57:f5:c1:d0:
1f:22:fa:c2:9b:4c:d0:65:2c:6c:2e:a2:d8:13:b2:
d6:a4:23:1b:21:56:11:46:0b:92:e3:7f:a5:19:75:
67:41:8d:02:43:ef:70:be:e8:e8:4e:f6:01:03:5b:
4c:70:03:49:07:e3:6d:e6:9e:af:f9:29:75:ca:50:
21:f5:17:26:c9:89:18:de:1a:29:8c:9c:dc:fa:12:
35:ed:f9:30:0b:bc:2c:c2:28:67:a0:d2:8e:e6:80:
a5:02:83:56:c9:d3:fa:3b:ab:e4:c2:2d:dc:42:7e:
03:51:19:da:44:00:54:e0:d9:0a:42:3a:ed:5c:0e:
00:fe:e4:98:e7:ec:6b:d7:06:5a:1a:86:b4:94:c5:
54:32:17:c5:31:ba:50:5a:5f:3a:10:45:ac:e1:6c:
08:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:16:CF:42:A9:DE:31:50:FF:44:AE:AE:0E:AF:31:C5:39:3F:0F:30
X509v3 Authority Key Identifier:
keyid:3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:78:fe:ec:87:55:b7:e6:72:92:e6:15:bb:7c:09:12:0c:62:
0b:77:ab:01:1d:bf:66:8c:22:c7:3c:ae:8f:a9:d3:7f:e7:2f:
70:e3:43:68:61:55:88:86:b8:b8:fd:f0:52:43:51:01:2d:6d:
c1:f9:97:d9:b1:c2:97:2b:6b:45:14:23:42:ff:84:46:99:ca:
cd:5e:15:91:7a:2a:cf:64:d5:94:8f:2c:9f:05:cf:6a:e6:ec:
82:48:8c:8d:1e:4f:20:bd:fe:79:82:c8:47:9d:5f:ca:83:29:
1b:06:f7:01:23:5b:6b:82:b8:0c:aa:07:1a:35:72:8d:34:2a:
fc:13:22:31:c4:c0:02:aa:69:c9:f9:3c:9c:83:af:2b:d8:d9:
0f:3c:29:9a:7c:b6:1b:c3:cd:34:4e:07:ca:18:d4:45:2a:aa:
29:7e:e9:9b:40:51:fd:3e:4a:d3:2a:c8:31:40:42:b6:7a:d2:
48:7c:9f:89:21:6c:9f:a2:ab:ef:58:67:c1:79:1c:bb:75:80:
16:3e:ae:d0:7a:b3:b1:13:c2:0d:64:fd:9d:dd:bb:06:73:d3:
92:3f:58:97:d2:2a:a1:f9:ef:9c:75:32:c7:73:3e:89:1a:db:
67:81:f6:29:15:cb:d4:47:39:18:04:63:33:2f:0f:13:73:37:
17:1f:71:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:57 2025 by rpki-client